No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

That is not done specific from Pulumi
If you want L7 load balancing you need to create the GCP certificate resources and link them to the HTTPS forwarding rule
If you want L4 load balancing you need something to manage the certificate inside of your cluster, normally cert-manager with a in-cluster L7 LB like nginx-ingress or istio

So, I can't do something so the SSL termination happens in the app running in the pod(s) itself?

You can
If you create a service with type load balancer you'll get a L4 LB directly to the service

Thank you Luiz, you helped me understand the possible solutions for my problem.